Whoops, let me try that again. LOL I took a look at Xen on Fedora a few years ago. I decided against it at that time; because, Xen is patched right into the kernel, which stop the regular kernel updates to my Fedora OS. As you may know, the Fedora kernel is updated often, and I liked being able to run the latest version of the kernel.
However, having the Xen that handles VMs patched right into the kernel helps security; since, the kernel must exits in memory in its entirity in order to run, so there is no file to hack, other than the kernel file which isn't currently loaded in memory. Additionally, security provided by applications like SELinux, that prevent intruders from messing around with memory or OS files, can go a long ways towards securing a computer. http://en.wikipedia.org/wiki/Security-Enhanced_Linux Regards, LelandJ On 01/29/2010 01:33 PM, Leland F. Jackson, CPA wrote: > I took a look at Xen on Fedora a few years ago. I decided > against it at that time; because, Zen if patched right into > the kernel This kind of frooze me into the kernel that > contained Zen. As you may know, the regular Xen patched > kernel, and I no longer received regular kernel updates. I > always like being able to run the latest Fedora kernel. > > However, having the application that handles VM patched > right into the kernel helps security; since, the kernel must > exits in memory in its entirity in order to run. If you > couple that with additional security provided by > applications like SELinux, that does not allow writing to > memory or OS files, and you have pretty good security. > _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/[email protected] ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
